GateDefender How to upgrade eSeries version 5.00.10 to...
Transcript of GateDefender How to upgrade eSeries version 5.00.10 to...
GateDefender
How to upgrade eSeries version 5.00.10 to 5.50
2
Copyright notice
© Panda Security 2014. All rights reserved.
Neither the documents nor the programs that you may access may be copied, reproduced, translated or transferred to any electronic or readable media without prior written permission from Panda Security, C/ Gran Via Don Diego Lopez de Haro 4, 48001 Bilbao (Bizkaia) SPAIN.
Trademarks
Windows Vista and the Windows logo are trademarks or registered trademarks of Microsoft Corporation in the United States and other countries. All other product names may be registered trademarks of their respective companies.
© Panda Security 2014. All rigths reserved.
GD 5.50
3
Introduction ...................................................................... 4
Backing up the current configuration ............................... 5
Upgrading from version 5.00.10 to 5.50 ........................... 5
Hardware Appliance upgrade ................................................................................................... 5
Image installation .................................................................................................................. 6
Package upgrade ................................................................................................................... 8
Software Appliance upgrade ................................................................................................... 13
Virtual Appliance upgrade ....................................................................................................... 13
Backup import and machine upgrade ............................. 14
Annexes. ......................................................................... 15
Annex 1. How to burn HW/Software Appliance USB images into a USB device ..................... 15
Annex 2. Location of 5.50 version images ............................................................................... 17
4
Introduction This document contains the procedure to upgrade GateDefender eSeries from version 5.00.10
to version 5.50.
GateDefender eSeries 5.50 includes major improvements compared to earlier versions, the
main ones are:
Enhancements in the configuration wizard: A new network mode has been added to
enable the use of outgoing firewall and application control in bridged mode. The
wizard has been redesigned, and now shows an initial screen with the three network
modes in which the appliance can be set up. The user will be further guided through
according to this initial selection.
Robust and scalable VPN: Ability to provide multiple VPNs, with multiplied throughput
and very granular access permission control.
Application Control: Ability to identify and block more than 160 applications like
Facebook, Skype, Spotify and WhatsApp, safeguarding business productivity.
Enhanced reporting through a user friendly dashboard. It allows administrators to
see in a single view a summary of the most important events that are happening in
the appliance. It is also possible to drill-down and view each of the categories of
events.
Real-time network monitoring: A powerful tool that includes an intuitive interface and
graphical representations of the traffic that flows through the Panda GateDefender
Appliance.
Other improvements:
o SMTP proxy domain routing
o Support for external authentication servers in the hotspot
o More languages supported in the GUI
Given the wide scope of the version, and with the aim of achieving a smooth upgrade
experience, it is recommended to follow the steps described in this guide to upgrade from
5.00.10 version to 5.50.
5
Backing up the current configuration The first step is to create a backup of your current installation, so that you can import it after
reinstalling the appliance and also as a preventive measure. You can create a backup from
System Backup.
Upgrading from version 5.00.10 to 5.50 This section describes the procedure to upgrade Hardware Appliances, Software Appliances
and Virtual Appliances.
Hardware Appliance upgrade There are two methods to upgrade GD eSeries to version 5.50:
The first and preferred method is the Image installation, in other words, reinstalling the
system using the 5.50 image that corresponds to the specific model.
The second is the Package upgrade method which allows you to upgrade the system from the
Panda Perimetral Management Console. This option is recommended for models where image
installation is limited due to lack of USB or CD connectors.
6
Image installation
Image installation is the recommended and preferred method to upgrade to version 5.50.
Apart from the new features and improvements already described, the log partition has also
been increased to accommodate any logging requirements that our customers may have. For
obvious reasons this change can only be accomplished if the image installation method is used.
The image installation option is recommended for the following hardware platforms:
Type of platform Platform Image to be used
Legacy Integra SB Integra eSoho 5.50 image
Legacy Performa SB Integra eSB 5.50 image
Legacy Performa 8105 eSeries Software appliance image
Legacy Performa 9050 eSeries Software appliance image
Legacy Performa Sun 9100 eSeries Software appliance image
Legacy Performa Nexcom 9100 eSeries Software appliance image
Legacy Sun 9200 Performa e9500lite 5.50 image
Legacy Sun 9500 Performa e9500 5.50 image
Legacy Nexcom 9500lite Performa e9500 5.50 image
Legacy Nexcom 9500 Performa e9500 5.50 image
eSeries Intega eSoho Integra eSoho 5.50 image
eSeries Integra eSB Integra eSB 5.50 image
eSeries Performa eSB Performa eSB 5.50 image
eSeries Performa e9100lite Performa e9100lite 5.50 image
eSeries Performa e9100 Performa e9100 5.50 image
eSeries Performa e9500lite Performa e9500lite 5.50 image
eSeries Performa e9500 Performa e9500 5.50 image
You need to burn the corresponding image into a USB drive. Once the HW/Software appliance
image is burnt into the USB drive, the appliance needs to be booted from the USB device and
the image will be automatically uploaded into the machine. This will be done in an unattended
way for Hardware Appliance images, and in an attended way for Software Appliance images.
Please refer to Annex 1. How to burn HW/Software Appliance USB images into a USB device
to create a bootable USB stick.
7
Depending on the model, there are some specific details to consider:
Integra SB/Performa SB:
Change the BIOS to boot your appliance from the USB drive:
1. Press the DEL key during startup to access the BIOS
2. Enter the password if you are prompted for it
3. In Advanced Bios Features, change the boot order:
4. In Hard Disk Boot Priority, make sure the USB device occupies the first position.
5. In Integrated Peripherals, enable the keyboard and the USB drives if necessary.
Enabling the keyboard will allow you to access the console locally.
8
6. Reboot your appliance. The image will be automatically installed.
Performa Sun 9500:
The two NVidia network cards must be active in the BIOS so that the network interfaces can be
detected. This step should have already been done to install the 5.00.10 version, so most
probably it will not be necessary to do it again.
Performa Nexcom 9500lite and 9500:
You must connect the USB stick only after you power on the machine (e.g. 1 or 2 seconds after). After installation, remove the files named /etc/businfotab* and reboot the appliance, this will allow your appliance to correctly get the LAN port configuration from your machine.
Please refer to the Backup import and machine upgrade section in this document to check the
necessary steps.
Package upgrade
Package upgrade is the recommended option for Integra 300 and Performa 8100 platforms or
any other systems you might find more suitable. The procedure to upgrade the packages is the
following
The first step will be to access the Panda Perimetral Management Console.
https://managedperimeter.pandasecurity.com/
9
To log in, use your Panda Perimetral Management Console credentials. If you have any
questions on this subject, please contact Panda Security Support.
From the Panda Perimetral Management Console, select the System or Systems you want to
upgrade. A predefined filter is available to show only upgradeable systems:
The next step will be to click on the button:
10
11
A summary screen will show the systems that are are selected for upgrade. Click on the
button:
A message confirming that the upgrade process has started will then be displayed:
12
The Actions tab will indicacte whether the upgrade process was successfully executed, failed or
is still pending.
13
Software Appliance upgrade If you have a Software Appliance, you’ll need to burn the software appliance image either to a
CD/DVD or a USB stick. The image comes in ISO format as well as in IMG format, so you can
decide which way is more suitable. In both cases, the image installation process is attended.
Please follow the instructions in Annex 1. How to burn HW/Software Appliance USB images
into a USB device to create the bootable USB.
Once you have the bootable CD/DVD/USB, you’ll need to change the boot order in the BIOS to
start from the corresponding device, load the image and install.
Virtual Appliance upgrade The .zip file created for the virtual appliance installation contains three .txt files with the
instructions for installation in KVM, VMWare and Xen/Citrix.
14
Backup import and machine upgrade
This step needs to be followed only in the case of image reinstallation (as opposed to a
package upgrade).
After installing the image, import the backup into the appliance. This will include the activation
code information, so you will not need to activate the appliance again.
Once this step has been done, you will still need to update the Base Channel from the Panda
Perimetral Management Console using the option in order to configure the
correct Base Channel version. Systems using version 5.00.10 use an activation code associated
with a Panda GateDefender 5.00 Base Channel, whereas systems with version 5.50 need to
use Panda GateDefender Hardware eSeries 5.50 Base Channel to correctly install future
updates.
Refer to the Package upgrade section in this document to check the necessary steps.
15
Annexes.
Annex 1. How to burn HW/Software Appliance USB images into a USB
device This procedure is valid to burn Integra eSoho USB images for the Integra SB model and the
Integra eSB USB image for the Performa SB model. You need to burn a USB device for
installation of the unattended version.
To burn the image to the USB drive, download the required application from the following
address:
http://www.alexpage.de/usb-image-tool/download/
Once you have the image and the USB drive is connected, run the application. In the
“Favorites” folder, click the Add button and select the downloaded image.
16
Then, select the USB device and the image and click Restore. At this moment, the created
partition will not be accessible from Microsoft Windows.
17
Annex 2. Location of 5.50 version images
Hardware Appliance
Integra eSoho:
http://acs.pandasoftware.com/GDeSeries/Hardware/5.50/PANDA-GATEDEFENDER-INTEGRA-ESOHO-5.50.00-stable-201405211310-unattended.usb.img
MD5 checksum: 3b1ea87d88249fc2168c13224efa3820
Integra eSB:
http://acs.pandasoftware.com/GDeSeries/Hardware/5.50/PANDA-GATEDEFENDER-INTEGRA-ESB-5.50.00-stable-201405211304-unattended.usb.img
MD5 checksum: 15e3437bb35ef2bf33af5fc0f759ed9d
Performa eSB:
http://acs.pandasoftware.com/GDeSeries/Hardware/5.50/PANDA-GATEDEFENDER-PERFORMA-ESB-5.50.00-stable-201405211352-unattended.usb.img
MD5 checksum: 4c375541f987031556556b969b9d5b73
Performa e9100lite:
http://acs.pandasoftware.com/GDeSeries/Hardware/5.50/PANDA-GATEDEFENDER-PERFORMA-E9100LITE-5.50.00-stable-201405211335-unattended.usb.img
MD5 checksum: 8a61209286e03c23e0bde093b91a31b0
Performa e9100:
18
http://acs.pandasoftware.com/GDeSeries/Hardware/5.50/PANDA-GATEDEFENDER-PERFORMA-E9100-5.50.00-stable-201405211329-unattended.usb.img
MD5 checksum: f11aea51978381fb9f96de061a77a765
Performa e9500lite:
http://acs.pandasoftware.com/GDeSeries/Hardware/5.50/PANDA-GATEDEFENDER-PERFORMA-E9500LITE-5.50.00-stable-201405211346-unattended.usb.img MD5 checksum: 17533a373beb32e45b5181c7afee2822
Performa e9500:
http://acs.pandasoftware.com/GDeSeries/Hardware/5.50/PANDA-GATEDEFENDER-PERFORMA-E9500-5.50.00-stable-201405211341-unattended.usb.img MD5 checksum: 3f20679b1834f0dd6f13f72a61fbc331
Virtual Appliance
ISO image:
http://acs.pandasoftware.com/GDeSeries/Virtual/5.50/PANDA-GATEDEFENDER-VIRTUAL-ESERIES-5.50.00-stable-201405211319.iso
MD5 checksum: d3ad7647460e8e4aa25d9358ff3b9941
Software Appliance
ISO image:
http://acs.pandasoftware.com/GDeSeries/Software/5.50/PANDA-GATEDEFENDER-SOFTWARE-ESERIES-5.50.00-stable-201405211316.iso
MD5 checksum: c16726a30d03d38a16f40fe1da24ff5d
19
USB image:
http://acs.pandasoftware.com/GDeSeries/Software/5.50/PANDA-GATEDEFENDER-SOFTWARE-ESERIES-IMG-5.50.00-stable-201405211322-unattended.usb.img MD5 checksum: 00546c8b091f282189bb10c7fb176472